← Back to search

io.github.jonradoff/lightcms

jonradoff Scanned 27d ago

AI-native CMS with 41 MCP tools for managing websites through natural language.

C
61.9 / 100

Versions

1.1.0latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 125

update_collection
annotations: verified low

Update a collection's settings.

readOnlyHint false idempotentHint true
list_asset_folders
annotations: verified low

List all unique folder paths in the asset library.

readOnlyHint true
delete_collection
annotations: verified low

Delete a collection. This does not delete the content in the collection.

readOnlyHint false idempotentHint true
regenerate_all_content
annotations: verified low

Regenerate all published static HTML pages. Use after major theme or template changes.

readOnlyHint false idempotentHint true
list_assets
annotations: verified low

List all assets in the asset library. Assets are files like images, documents, CSS, JS, etc.

readOnlyHint true
start_link_check
annotations: verified low

Start an asynchronous broken-link check across all published content. Returns a job_id immediately. Poll get_link_check_results(job_id) until status is "done". Example workflow: start_link_check() → {job_id: "abc123"} get_link_check_results("abc123") → if status=="running", wait and retry; if "done", review broken_links

readOnlyHint false idempotentHint false
get_link_check_results
annotations: verified low

Get the status and results of a link check job. Status is "running", "done", or "failed".

readOnlyHint true
get_theme
annotations: verified low

Get current theme settings including colors, fonts, and custom HTML for header/footer.

readOnlyHint true idempotentHint true
update_theme
annotations: verified low

Update theme settings. Only the fields you provide are changed — all other settings are preserved (partial update, safe to call without get_theme first). Changing header_html or footer_html triggers background regeneration of all published pages. Changing colors, fonts, or custom_css does NOT require content regeneration. Use pin_theme_version to protect important milestones before making major changes.

readOnlyHint false idempotentHint true
get_theme_versions
annotations: verified low

Get the version history for theme settings. Returns list of versions with timestamps.

readOnlyHint true
get_theme_version
annotations: verified low

Get a specific version of theme settings with full data.

readOnlyHint true idempotentHint false
revert_theme_to_version
annotations: verified low

Revert theme to a previous version. Creates a new version with the old data.

readOnlyHint false idempotentHint false
pin_theme_version
annotations: verified low

Lock a theme version so it is protected from automatic pruning or accidental overwrite. Pinned versions are marked with locked=true in get_theme_versions. Use this to preserve milestone theme states (e.g., after a major redesign) before making further changes. Example: {"version": 5}

readOnlyHint false idempotentHint true
unpin_theme_version
annotations: verified low

Remove the lock from a previously pinned theme version. Example: {"version": 5}

readOnlyHint false idempotentHint true
get_site_config
annotations: verified low

Get site configuration including title templates.

readOnlyHint true idempotentHint true
update_site_config
annotations: verified low

Update site configuration. Title templates support {{title}} and {{site_name}} placeholders.

readOnlyHint false idempotentHint true
list_redirects
annotations: verified low

List all URL redirects configured for the site.

readOnlyHint true idempotentHint false
create_redirect
annotations: verified low

Create a new URL redirect. Use 301 for permanent redirects, 302 for temporary.

readOnlyHint false idempotentHint false
update_redirect
annotations: verified low

Update an existing redirect.

readOnlyHint false idempotentHint true
delete_redirect
annotations: verified low

Delete a redirect.

readOnlyHint false idempotentHint true
list_folders
annotations: verified low

List all content folders. Folders organize content into URL path segments.

readOnlyHint true idempotentHint false
create_folder
annotations: verified low

Create a new content folder. Folders create URL path segments for organizing content.

readOnlyHint false idempotentHint false
get_folder
annotations: verified low

Get a folder by ID.

readOnlyHint true idempotentHint true
delete_folder
annotations: verified low

Delete an empty folder. Cannot delete folders that contain content or subfolders.

readOnlyHint false idempotentHint true
list_collections
annotations: verified low

List all content collections. Collections group and display content by category.

readOnlyHint true idempotentHint false
create_collection
annotations: verified low

Create a new content collection. Collections display grouped content with custom templates.

readOnlyHint false idempotentHint false
get_collection
annotations: verified low

Get a collection by ID.

readOnlyHint true idempotentHint true
get_asset
annotations: verified low

Get asset metadata by ID or path. Does not return file content (use the serve path to access the file).

readOnlyHint true
upload_asset
annotations: verified low

Upload or replace an asset in the asset library. Re-uploading to the same serve_path replaces the existing file in place — no need to delete first. Provide file content via one of: - file_path: Absolute local path to the file (preferred for files >100KB — avoids MCP transport size limits) - data_base64: Base64-encoded file content (fine for small files) Validates file type and MIME type for security.

readOnlyHint false idempotentHint false
upload_asset_from_url
annotations: verified low

Fetch a public URL and store it as a LightCMS asset. Useful for importing images or files from the web without downloading them locally first. Example: {"url": "https://example.com/logo.png", "serve_path": "/assets/logo.png", "description": "Site logo"} If serve_path is omitted, the filename is derived from the URL. Returns id, serve_path, mime_type, and size.

readOnlyHint false idempotentHint false
delete_asset
annotations: verified low

Delete an asset from the library. Removes both the file and database record.

readOnlyHint false idempotentHint true
list_import_sources
annotations: verified low

List all configured RSS/Atom import sources

readOnlyHint true idempotentHint false
create_import_source
annotations: verified low

Create a new RSS/Atom import source that automatically pulls content from a feed

readOnlyHint false idempotentHint false
update_import_source
annotations: verified low

Update an RSS import source configuration

readOnlyHint false idempotentHint true
delete_import_source
annotations: verified low

Delete an RSS import source

readOnlyHint false idempotentHint true
trigger_import_source
annotations: verified low

Manually trigger an RSS import source to run immediately

readOnlyHint false idempotentHint false
import_markdown
annotations: verified low

Import one or more Markdown pages into LightCMS. Each page can include YAML frontmatter (title, slug, folder, template, published, publish_at). Ideal for bulk content creation by AI agents — generate markdown with frontmatter and import directly. Example frontmatter: --- title: My Page slug: my-page folder: /blog template: Blog Post published: false --- Page body content here.

readOnlyHint false idempotentHint false
import_csv
annotations: verified low

Import content from CSV data. Each row becomes a content page. Specify which column is the title; all columns become content fields.

readOnlyHint false idempotentHint false
list_import_jobs
annotations: verified low

List recent import jobs with their status and results

readOnlyHint true
get_import_job
annotations: verified low

Get the status, results, and log of a specific import job

readOnlyHint true
cancel_import_job
annotations: verified low

Cancel a running import job

readOnlyHint false idempotentHint false
list_comments
annotations: verified low

List all discussion comments on a content item.

readOnlyHint true
create_comment
annotations: none low

Post a discussion comment on a content item. Requires discussion.post permission.

delete_comment
annotations: none low

Delete a discussion comment. Requires comment.delete permission (admin only).

start_agent_sandbox
annotations: verified low

Start a sandboxed editing session backed by a content fork ("pull request for content"). While the sandbox is active: - update_content / update_content_by_path transparently copy pages into the fork and edit the copies (copy-on-write). Live content is never modified. - create_content creates new pages inside the fork. - Publishing, deleting, bulk operations, and search/replace-execute are blocked. - The site is unaffected until a human reviews the fork at /cm/forks and merges it. Recommended for any multi-page or risky editing task. End with end_agent_sandbox.

readOnlyHint false idempotentHint false
get_agent_sandbox
annotations: verified low

Show whether an agent sandbox is active, and if so its fork ID, name, and the pages changed so far (with per-field diffs against live).

readOnlyHint true idempotentHint false
end_agent_sandbox
annotations: verified low

End the sandbox session. action='submit' keeps the fork for human review and merge (at /cm/forks/{id}); action='discard' permanently deletes the fork and all its changes. Agents cannot merge their own sandbox — merging is a human decision.

readOnlyHint false idempotentHint false
get_fork_diff
annotations: verified low

Per-field differences between each page in a fork and its live counterpart — the review surface for merging a fork. Status 'added' means the page exists only in the fork.

readOnlyHint true
get_agent_session_changes
annotations: verified low

The audit ledger for an agent session: every content item it changed, with actions and timestamps. Defaults to the current MCP session. Requires audit permissions.

readOnlyHint true
rollback_agent_session
annotations: verified low

Undo every content change made by an agent session as a unit: content the session created is soft-deleted, deleted content is restored, and updated content reverts to its latest pre-session version. Defaults to the current MCP session ("undo everything I did"). Non-content changes (templates, settings) are listed for manual review but not auto-reverted.

readOnlyHint false idempotentHint true
get_maintenance_report
annotations: verified low

The latest site-health scan: stale pages (no update in ~6 months), published pages missing meta descriptions, and lingering drafts. Use it as a work queue — fix issues via the sandbox workflow.

readOnlyHint true idempotentHint true
run_maintenance_scan
annotations: verified low

Run a site-health scan now and return the fresh report. Scans also run automatically once a day.

readOnlyHint false idempotentHint true
get_site_info
annotations: verified low

Name, tagline, and base URL of this site, plus pointers to llms.txt and the sitemap.

readOnlyHint true
list_pages
annotations: verified low

All published pages on this site: title, path, and meta description.

readOnlyHint true
search_site
annotations: verified low

Full-text search across the published site. Returns matching pages with snippets.

readOnlyHint true
get_page
annotations: verified low

Full plain-text content of one published page by URL path, with title, description, and publish date.

readOnlyHint true
list_approval_workflows
annotations: verified low

List all configured approval workflows. Requires approval.manage_workflows permission.

readOnlyHint true
get_approval_workflow
annotations: verified low

Get a single approval workflow by ID.

readOnlyHint true
create_approval_workflow
annotations: none low

Create a new approval workflow. Trigger types: all_contributor, folder_path, template_id, tag. Mode: sequential or concurrent.

update_approval_workflow
annotations: none low

Update an existing approval workflow.

delete_approval_workflow
annotations: mismatch low

Delete an approval workflow.

readOnlyHint true
list_approval_requests
annotations: verified low

List pending approval requests. Use filter=mine to see only requests in your queue.

readOnlyHint true
get_approval_request
annotations: verified low

Get details of a single approval request including decisions so far.

readOnlyHint true
submit_for_approval
annotations: none low

Explicitly submit a content item for editorial approval. Contributors must submit content for approval before it can be published.

approve_request
annotations: none low

Approve an approval request. When all required approvals are collected the content is automatically published.

reject_request
annotations: none low

Reject an approval request. A comment explaining the rejection is required and will be posted to the content's discussion thread.

cancel_approval_request
annotations: none low

Cancel a pending approval request.

list_templates
annotations: verified low

List all available templates. Templates define content structure with fields and HTML layout.

readOnlyHint true
get_template
annotations: verified low

Get a single template by ID or slug. Returns full template including fields and HTML layout.

readOnlyHint true idempotentHint false
create_template
annotations: verified low

Create a new template. Define fields with name, label, type (text, textarea, richtext, date, image, select), and options.

readOnlyHint false idempotentHint false
update_template
annotations: verified low

Update an existing template. Changing the HTML layout will regenerate all content using this template.

readOnlyHint false idempotentHint true
delete_template
annotations: verified low

Delete a template. Cannot delete system templates or templates that have content using them.

readOnlyHint false idempotentHint true
list_snippets
annotations: verified low

List all snippets. Snippets are reusable Go-template HTML fragments used in lc:query index page directives.

readOnlyHint true
get_snippet
annotations: verified low

Get a snippet by ID.

readOnlyHint true
create_snippet
annotations: verified low

Create a new snippet. Snippets are Go templates that render one content item in an lc:query index page. Reference by name: <!-- lc:query filter=\"tag:MyTag\" snippet=\"your-snippet-name\" -->

readOnlyHint false
update_snippet
annotations: verified low

Update an existing snippet's name and/or HTML template.

readOnlyHint false
delete_snippet
annotations: verified low

Delete a snippet by ID.

readOnlyHint false
search_content
annotations: verified low

Search across all content items by title or full text. Returns matching content with paths and match context.

readOnlyHint true
search_replace_preview
annotations: verified low

Preview a site-wide search-and-replace without making any changes. ALWAYS run this before search_replace_execute. Returns: affected page count, total match count, and per-page field breakdown. For targeted replacements (a folder, template, or category), use scoped_search_replace_preview instead.

readOnlyHint true
search_replace_execute
annotations: verified low

Execute a site-wide search-and-replace across all content. Modifies every matching page permanently. MANDATORY workflow: 1. Run search_replace_preview and show the user which pages will be affected. 2. Get explicit user confirmation before executing. 3. Run search_replace_execute with a clear version_comment. Set auto_republish: true to immediately re-publish all previously-published pages after updating them, collapsing the execute + publish_multiple flow into one call. For targeted replacements, use scoped_search_replace_execute instead.

readOnlyHint false idempotentHint false
end_user_search
annotations: verified low

Search published content using full-text exact match, semantic (AI) similarity, or hybrid mode. Returns page titles, paths, and snippets.

readOnlyHint true idempotentHint true
reindex_embeddings
annotations: verified low

Regenerate vector embeddings for all published content. Required after initial setup or if embeddings become stale.

readOnlyHint false idempotentHint true
list_forks
annotations: verified low

List all content fork workspaces. Forks let you stage changes to multiple pages as a batch before merging them live. Each fork shows its status (active/merged/archived), page count, and who created it. Use get_fork to see the specific pages in a fork.

readOnlyHint true
create_fork
annotations: verified low

Create a new named fork workspace for staging content changes. A fork is an isolated workspace where you can edit copies of live pages without affecting the public site. When ready, an admin can merge the fork to push all changes live at once. Typical workflow: 1. create_fork — create the workspace 2. fork_page — copy pages you want to edit into the fork (returns a fork page ID) 3. update_content (with the fork page ID) — make your edits 4. merge_fork — merge all changes to the live site (admin only) Returns the fork ID needed for subsequent fork operations.

readOnlyHint false idempotentHint false
get_fork
annotations: verified low

Get details of a fork workspace including its status and list of pages. Returns: fork metadata + array of pages (id, title, full_path, updated_at). Use the page id with get_content or update_content to read/edit fork pages.

readOnlyHint true
fork_page
annotations: verified low

Copy a live page into a fork workspace so you can edit it without affecting the public site. Provide either: - path: the URL path of the page (e.g. "/about", "/blog/my-post") — preferred when you know the URL - content_id: the MongoDB ObjectID of the content item Returns the fork page ID. Use this ID with update_content to make edits: 1. fork_page → get fork_page_id 2. update_content with id=fork_page_id to edit 3. get_content with id=fork_page_id to verify 4. merge_fork when all edits are ready (admin only) If the page is already in this fork, returns the existing fork copy.

readOnlyHint false idempotentHint true
remove_fork_page
annotations: verified low

Remove a page from a fork workspace (discards the fork copy, does not affect the live page).

readOnlyHint false idempotentHint true
merge_fork
annotations: verified low

Merge all pages in a fork workspace into live content. Requires admin role. For each page in the fork: - If a matching live page exists (same URL): updates it with the fork content (fork wins). If the live page was edited after the fork was created, records a conflict but still merges. - If no live page exists at that URL: creates a new live page. After merging, the fork status changes to "merged". Published live pages are regenerated immediately. Returns: updated count, created count, any conflicts detected. ALWAYS confirm with the user before merging, as this pushes changes to the live site.

readOnlyHint false idempotentHint false
archive_fork
annotations: verified low

Archive a fork without merging it. The fork and its pages are preserved but the fork becomes read-only. Requires admin role.

readOnlyHint false idempotentHint true
delete_fork
annotations: verified low

Permanently delete a fork and all its pages. Cannot delete a merged fork. Requires admin role.

readOnlyHint false idempotentHint false
schedule_content_publish
annotations: verified low

Set a future publish date/time for a content item. The scheduler automatically publishes it when the time arrives.

readOnlyHint false idempotentHint true
cancel_scheduled_publish
annotations: verified low

Clear the scheduled publish time for a content item.

readOnlyHint false idempotentHint true
list_scheduled_content
annotations: verified low

List all unpublished content items that have a scheduled publish time set.

readOnlyHint true
list_content
annotations: verified low

List all content items with optional filters. Returns content metadata including title, path, publish status, and timestamps. Add include_data: true to get full field data for all items in one call, or include_fields: ["field1", "field2"] to fetch only specific fields — both avoid per-item get_content calls for bulk workflows. Up to 20 concurrent update_content calls are safe. For larger batches, prefer bulk_update_content (up to 100 items per call).

readOnlyHint true
get_content
annotations: verified low

Get a single content item by ID or path. Returns full content including all field data (title, slug, full_path, data fields, published state). Prefer path when you know the URL: {"path": "/about"} Use id when you have the MongoDB ObjectID: {"id": "abc123"} Set include_rendered=true to also receive the fully rendered HTML output (template + theme header/footer applied). Useful for verifying what visitors see without publishing. Tip: to preview unsaved edits before publishing, use preview_content instead.

readOnlyHint true
create_content
annotations: verified low

Create a new content item. Requires a template_id, title, slug, and the data fields defined by the template. Workflow: 1. Call list_templates to find the right template and its field names. 2. Create the content with data matching those fields. 3. Call publish_content to make it live (or set published=true here to do both in one step). Set use_header=true, use_footer=true, use_theme=true for pages that should use the site layout. Always include version_comment to make history readable. Content data fields support rich markup features: - [[Wikilinks]] and [[Page Title|display text]] — link to other pages by title or path; auto-update when paths change - [[include:snippet-name]] — embed a named snippet inline (reusable callouts, CTAs, disclaimers) - #hashtags — mention #tagname anywhere to automatically tag the page - Markdown fields (type "markdown") — GitHub Flavored Markdown converted to HTML at publish time Templates can use {{.lc_toc}} in their HTML layout to inject an auto-generated table of contents.

readOnlyHint false idempotentHint false
update_content
annotations: verified low

Update an existing content item by ID. Creates a new version automatically. Only send fields you want to change. For partial data updates, only the keys you include in "data" are changed — existing keys are preserved (merge semantics). Use clear_fields: ["field1", "field2"] to explicitly set fields to empty string. Set dry_run: true to validate the update without saving. To update by URL path instead of ID, use update_content_by_path. Always include version_comment so the version history is useful. Up to 20 concurrent update_content calls are safe. For larger batches (>20 items), prefer bulk_update_content instead. Example: {"id": "abc123", "data": {"body": "<p>Updated text</p>"}, "version_comment": "Revised intro paragraph"} Content data fields support rich markup features: - [[Wikilinks]] and [[Page Title|display text]] — link to other pages by title or path; auto-update when paths change - [[include:snippet-name]] — embed a named snippet inline (reusable callouts, CTAs, disclaimers) - #hashtags — mention #tagname anywhere to automatically tag the page - Markdown fields (type "markdown") — GitHub Flavored Markdown converted to HTML at publish time Templates can use {{.lc_toc}} in their HTML layout to inject an auto-generated table of contents.

readOnlyHint false
publish_content
annotations: verified low

Publish a content item, making it visible on the public site. Generates the static HTML page.

readOnlyHint false idempotentHint true
unpublish_content
annotations: verified low

Unpublish a content item, removing it from the public site. Removes the static HTML page.

readOnlyHint false idempotentHint true
delete_content
annotations: verified low

Soft-delete a content item. The content can be restored later. Removes the static HTML page.

readOnlyHint false idempotentHint true
restore_content
annotations: verified low

Restore a soft-deleted content item. Regenerates static page if content was published.

readOnlyHint false idempotentHint true
get_content_versions
annotations: verified low

Get the version history for a content item. Returns list of versions with timestamps.

readOnlyHint true
get_content_version
annotations: verified low

Get a specific version of a content item with full field data.

readOnlyHint true idempotentHint false
revert_to_version
annotations: verified low

Revert content to a previous version. Creates a new version with the old data.

readOnlyHint false idempotentHint false
publish_multiple
annotations: verified low

Publish multiple content items in a single call. Use this instead of calling publish_content in a loop. Examples: - Publish specific pages: {"ids": ["abc123", "def456"]} - Publish all drafts at once: {"publish_all_drafts": true} Returns a list of published IDs and any failures.

readOnlyHint false idempotentHint true
preview_content
annotations: verified low

Render a content item's HTML without saving or publishing. Use this to verify what a page will look like before publishing. Also accepts optional title/data overrides to preview unsaved edits: {"id": "abc123", "data": {"body": "<p>New text</p>"}} Returns rendered_html and any warnings (missing required fields, unclosed tags, unresolved placeholders).

readOnlyHint true
update_content_by_path
annotations: verified low

Update content identified by its URL path instead of its ID. Useful when you know the page URL but not the MongoDB ID. Example: {"path": "/about", "title": "About Us", "data": {"body": "<p>Updated content</p>"}} Only the fields you provide are changed. Always include a version_comment describing what changed.

readOnlyHint false idempotentHint true
scoped_search_replace_preview
annotations: verified low

Preview a search-and-replace limited to a subset of pages. Safer than site-wide replacement. Scope options (all optional — leave blank to match all pages): - content_ids: specific page IDs - folder_path: pages under /blog, /docs, etc. - template_name: pages using "Concept Page", "Blog Post", etc. - category: pages with a matching category Example: {"search": "old text", "replace": "new text", "folder_path": "/blog"} Always run preview before execute.

readOnlyHint true
get_backlinks
annotations: verified low

Find all published pages that link to the given URL path. Links are tracked automatically whenever a page is published — both [[Wikilinks]] and ordinary <a href="..."> links in content fields are indexed. Use this to discover which pages reference a given page (wiki-style backlink graph), assess the impact of deleting or renaming a page, or find orphaned pages with no inbound links. Example: {"path": "/about"} returns every published page whose content contains a link to /about.

readOnlyHint true
scoped_search_replace_execute
annotations: verified low

Execute a search-and-replace limited to a subset of pages. ALWAYS run scoped_search_replace_preview first and show results to the user before executing. Scope options (all optional): - content_ids, folder_path, template_name, category Set auto_republish: true to immediately re-publish all previously-published pages after updating them, collapsing the execute + publish_multiple flow into one call. Example: {"search": "old text", "replace": "new text", "folder_path": "/blog", "auto_republish": true, "version_comment": "Updated old references"}

readOnlyHint false idempotentHint false
bulk_create_content
annotations: verified low

Create up to 100 content items in a single call using efficient batch insert. Items are inserted via MongoDB InsertMany for maximum throughput. If one item fails (e.g., duplicate path), the rest continue. Published items get their static HTML generated in parallel (up to 10 concurrent). Set upsert: true to update existing pages at the same path instead of failing on duplicates. Returns: total attempted, succeeded, failed counts, and per-item {id, full_path, success, error} details.

readOnlyHint false idempotentHint false
bulk_update_content
annotations: verified low

Update up to 100 content items in a single call. Use instead of calling update_content in a loop. Each update in the array specifies the content ID and only the fields you want to change (merge semantics on data). Use clear_fields to explicitly clear field values to empty string. Set dry_run: true to validate all IDs exist without committing changes. Returns: total attempted, succeeded, failed counts, and per-item success/error details. Tip: call list_content with include_data: true first to get IDs + current field values, transform as needed, then submit here. Recommended batch size: up to 50 per call for optimal performance.

readOnlyHint false idempotentHint false
bulk_field_operation
annotations: verified low

Apply a single field operation to all matching content pages in one call. Operations: - clear: set field to empty string - set: replace field value with a fixed string - prepend: add text before existing field value - append: add text after existing field value - wrap: surround existing value with before/after strings Use scope filters to limit which pages are affected (content_ids, folder_path, template_name, category). Set dry_run: true to preview which pages would be changed without saving. Example: {"operation": "prepend", "field": "disclaimer", "value": "<p>Note: </p>", "template_name": "Blog Post"}

readOnlyHint false idempotentHint false
export_content
annotations: verified low

Export content items with their full field data as a structured JSON array. Use for batch transformations: export → transform externally → re-import via bulk_update_content. Scope filters (all optional): - template_name: most useful for bulk workflows, e.g. "Concept Page" or "Blog Post" - category, folder_path, content_ids: narrower scoping options Use fields: ["field1", "field2"] to include only specific data fields instead of all fields. Returns: total count and array of items with id, title, slug, full_path, template_name, published, and data.

readOnlyHint true
list_audit_logs
annotations: verified low

List recent audit log entries. Admin only. Supports filtering by action and resource type.

readOnlyHint true
get_content_lock
annotations: verified low

Get the current advisory lock status for a content item. Returns lock holder and expiry, or {locked: false} if unlocked.

readOnlyHint true idempotentHint true
acquire_content_lock
annotations: verified low

Acquire an advisory lock on a content item for the current API user. Returns conflict if another user holds the lock.

readOnlyHint false idempotentHint true
release_content_lock
annotations: verified low

Release the advisory lock on a content item held by the current API user.

readOnlyHint false idempotentHint true
force_unlock_content
annotations: verified low

Admin only: force-release any lock on a content item regardless of who holds it.

readOnlyHint false idempotentHint true
list_webhooks
annotations: verified low

List all registered webhooks. Secrets are never returned.

readOnlyHint true
create_webhook
annotations: verified low

Create a new webhook. Returns the generated HMAC-SHA256 secret ONCE — save it immediately. Valid event types: content.create, content.update, content.publish, content.unpublish, content.delete, comment.created, content.pending_approval, asset.pending_review

readOnlyHint false
update_webhook
annotations: verified low

Update an existing webhook (name, URL, events, active). Partial update — only provided fields change.

readOnlyHint false idempotentHint true
delete_webhook
annotations: verified low

Permanently delete a webhook.

readOnlyHint false idempotentHint true
regenerate_webhook_secret
annotations: verified low

Generate a new HMAC-SHA256 signing secret for a webhook. The old secret stops working immediately. The new secret is returned ONCE — save it.

readOnlyHint false idempotentHint false
list_webhook_deliveries
annotations: verified low

List recent delivery attempts for a webhook.

readOnlyHint true

Permissions 1

network medium
Server uses network capabilities via: fetch()

Scan Findings 317

info
Tool 'start_link_check' annotations are consistent annotation_checker · 80%
info
Tool 'get_link_check_results' annotations are consistent annotation_checker · 80%
info
Tool 'get_theme' annotations are consistent annotation_checker · 80%
info
Tool 'update_theme' annotations are consistent annotation_checker · 80%
info
Tool 'get_theme_versions' annotations are consistent annotation_checker · 80%
info
Tool 'get_theme_version' annotations are consistent annotation_checker · 80%
info
Tool 'revert_theme_to_version' annotations are consistent annotation_checker · 80%
info
Tool 'pin_theme_version' annotations are consistent annotation_checker · 80%
info
Tool 'unpin_theme_version' annotations are consistent annotation_checker · 80%
info
Tool 'get_site_config' annotations are consistent annotation_checker · 80%
info
Tool 'update_site_config' annotations are consistent annotation_checker · 80%
info
Tool 'list_redirects' annotations are consistent annotation_checker · 80%
info
Tool 'create_redirect' annotations are consistent annotation_checker · 80%
info
Tool 'update_redirect' annotations are consistent annotation_checker · 80%
info
Tool 'delete_redirect' annotations are consistent annotation_checker · 80%
info
Tool 'list_folders' annotations are consistent annotation_checker · 80%
info
Tool 'create_folder' annotations are consistent annotation_checker · 80%
info
Tool 'get_folder' annotations are consistent annotation_checker · 80%
info
Tool 'delete_folder' annotations are consistent annotation_checker · 80%
info
Tool 'list_collections' annotations are consistent annotation_checker · 80%
info
Tool 'create_collection' annotations are consistent annotation_checker · 80%
info
Tool 'get_collection' annotations are consistent annotation_checker · 80%
info
Tool 'update_collection' annotations are consistent annotation_checker · 80%
info
Tool 'delete_collection' annotations are consistent annotation_checker · 80%
info
Tool 'regenerate_all_content' annotations are consistent annotation_checker · 80%
info
Tool 'list_assets' annotations are consistent annotation_checker · 80%
info
Tool 'list_asset_folders' annotations are consistent annotation_checker · 80%
info
Tool 'get_asset' annotations are consistent annotation_checker · 80%
info
Tool 'upload_asset' annotations are consistent annotation_checker · 80%
info
Tool 'upload_asset_from_url' annotations are consistent annotation_checker · 80%
info
Tool 'delete_asset' annotations are consistent annotation_checker · 80%
info
Tool 'list_import_sources' annotations are consistent annotation_checker · 80%
info
Tool 'create_import_source' annotations are consistent annotation_checker · 80%
info
Tool 'update_import_source' annotations are consistent annotation_checker · 80%
info
Tool 'delete_import_source' annotations are consistent annotation_checker · 80%
info
Tool 'trigger_import_source' annotations are consistent annotation_checker · 80%
info
Tool 'import_markdown' annotations are consistent annotation_checker · 80%
info
Tool 'import_csv' annotations are consistent annotation_checker · 80%
info
Tool 'list_import_jobs' annotations are consistent annotation_checker · 80%
info
Tool 'get_import_job' annotations are consistent annotation_checker · 80%
info
Tool 'cancel_import_job' annotations are consistent annotation_checker · 80%
info
Tool 'list_comments' annotations are consistent annotation_checker · 80%
low
Tool 'create_comment' has no annotations annotation_checker · 100%
low
Tool 'delete_comment' has no annotations annotation_checker · 100%
info
Tool 'start_agent_sandbox' annotations are consistent annotation_checker · 80%
info
Tool 'get_agent_sandbox' annotations are consistent annotation_checker · 80%
info
Tool 'end_agent_sandbox' annotations are consistent annotation_checker · 80%
info
Tool 'get_fork_diff' annotations are consistent annotation_checker · 80%
info
Tool 'get_agent_session_changes' annotations are consistent annotation_checker · 80%
info
Tool 'rollback_agent_session' annotations are consistent annotation_checker · 80%
info
Tool 'get_maintenance_report' annotations are consistent annotation_checker · 80%
info
Tool 'run_maintenance_scan' annotations are consistent annotation_checker · 80%
info
Tool 'get_site_info' annotations are consistent annotation_checker · 80%
info
Tool 'list_pages' annotations are consistent annotation_checker · 80%
info
Tool 'search_site' annotations are consistent annotation_checker · 80%
info
Tool 'get_page' annotations are consistent annotation_checker · 80%
info
Tool 'list_approval_workflows' annotations are consistent annotation_checker · 80%
info
Tool 'get_approval_workflow' annotations are consistent annotation_checker · 80%
low
Tool 'create_approval_workflow' has no annotations annotation_checker · 100%
low
Tool 'update_approval_workflow' has no annotations annotation_checker · 100%
high
Tool 'delete_approval_workflow' claims readOnly but name implies destructive operation annotation_checker · 80%
info
Tool 'list_approval_requests' annotations are consistent annotation_checker · 80%
info
Tool 'get_approval_request' annotations are consistent annotation_checker · 80%
low
Tool 'submit_for_approval' has no annotations annotation_checker · 100%
low
Tool 'approve_request' has no annotations annotation_checker · 100%
low
Tool 'reject_request' has no annotations annotation_checker · 100%
low
Tool 'cancel_approval_request' has no annotations annotation_checker · 100%
info
Tool 'list_templates' annotations are consistent annotation_checker · 80%
info
Tool 'get_template' annotations are consistent annotation_checker · 80%
info
Tool 'create_template' annotations are consistent annotation_checker · 80%
info
Tool 'update_template' annotations are consistent annotation_checker · 80%
info
Tool 'delete_template' annotations are consistent annotation_checker · 80%
info
Tool 'list_snippets' annotations are consistent annotation_checker · 80%
info
Tool 'get_snippet' annotations are consistent annotation_checker · 80%
info
Tool 'create_snippet' annotations are consistent annotation_checker · 80%
info
Tool 'update_snippet' annotations are consistent annotation_checker · 80%
info
Tool 'delete_snippet' annotations are consistent annotation_checker · 80%
info
Tool 'search_content' annotations are consistent annotation_checker · 80%
info
Tool 'search_replace_preview' annotations are consistent annotation_checker · 80%
info
Tool 'search_replace_execute' annotations are consistent annotation_checker · 80%
info
Tool 'end_user_search' annotations are consistent annotation_checker · 80%
info
Tool 'reindex_embeddings' annotations are consistent annotation_checker · 80%
info
Tool 'list_forks' annotations are consistent annotation_checker · 80%
info
Tool 'create_fork' annotations are consistent annotation_checker · 80%
info
Tool 'get_fork' annotations are consistent annotation_checker · 80%
info
Tool 'fork_page' annotations are consistent annotation_checker · 80%
info
Tool 'remove_fork_page' annotations are consistent annotation_checker · 80%
info
Tool 'merge_fork' annotations are consistent annotation_checker · 80%
info
Tool 'archive_fork' annotations are consistent annotation_checker · 80%
info
Tool 'delete_fork' annotations are consistent annotation_checker · 80%
info
Tool 'schedule_content_publish' annotations are consistent annotation_checker · 80%
info
Tool 'cancel_scheduled_publish' annotations are consistent annotation_checker · 80%
info
Tool 'list_scheduled_content' annotations are consistent annotation_checker · 80%
info
Tool 'list_content' annotations are consistent annotation_checker · 80%
info
Tool 'get_content' annotations are consistent annotation_checker · 80%
info
Tool 'create_content' annotations are consistent annotation_checker · 80%
info
Tool 'update_content' annotations are consistent annotation_checker · 80%
info
Tool 'publish_content' annotations are consistent annotation_checker · 80%
info
Tool 'unpublish_content' annotations are consistent annotation_checker · 80%
info
Tool 'delete_content' annotations are consistent annotation_checker · 80%
info
Tool 'restore_content' annotations are consistent annotation_checker · 80%
info
Tool 'get_content_versions' annotations are consistent annotation_checker · 80%
info
Tool 'get_content_version' annotations are consistent annotation_checker · 80%
info
Tool 'revert_to_version' annotations are consistent annotation_checker · 80%
info
Tool 'publish_multiple' annotations are consistent annotation_checker · 80%
info
Tool 'preview_content' annotations are consistent annotation_checker · 80%
info
Tool 'update_content_by_path' annotations are consistent annotation_checker · 80%
info
Tool 'scoped_search_replace_preview' annotations are consistent annotation_checker · 80%
info
Tool 'get_backlinks' annotations are consistent annotation_checker · 80%
info
Tool 'scoped_search_replace_execute' annotations are consistent annotation_checker · 80%
info
Tool 'bulk_create_content' annotations are consistent annotation_checker · 80%
info
Tool 'bulk_update_content' annotations are consistent annotation_checker · 80%
info
Tool 'bulk_field_operation' annotations are consistent annotation_checker · 80%
info
Tool 'export_content' annotations are consistent annotation_checker · 80%
info
Tool 'list_audit_logs' annotations are consistent annotation_checker · 80%
info
Tool 'get_content_lock' annotations are consistent annotation_checker · 80%
info
Tool 'acquire_content_lock' annotations are consistent annotation_checker · 80%
info
Tool 'release_content_lock' annotations are consistent annotation_checker · 80%
info
Tool 'force_unlock_content' annotations are consistent annotation_checker · 80%
info
Tool 'list_webhooks' annotations are consistent annotation_checker · 80%
info
Tool 'create_webhook' annotations are consistent annotation_checker · 80%
info
Tool 'update_webhook' annotations are consistent annotation_checker · 80%
info
Tool 'delete_webhook' annotations are consistent annotation_checker · 80%
info
Tool 'regenerate_webhook_secret' annotations are consistent annotation_checker · 80%
info
Tool 'list_webhook_deliveries' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: github.com/gorilla/csrf@1.7.3 (GHSA-82ff-hg59-8x73) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/gorilla/csrf@1.7.3 (GO-2025-3884) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GHSA-89xv-2j6f-qhc8) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GHSA-q382-vc8q-7jhj) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GHSA-wvj2-96wp-fq3f) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GHSA-xw59-hvm2-8pj6) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GO-2026-4569) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GO-2026-4770) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GO-2026-4773) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/modelcontextprotocol/go-sdk@1.2.0 (GO-2026-5771) dependency_analyzer · 95%
medium
Vulnerable dependency: go.mongodb.org/mongo-driver@1.17.6 (GHSA-cp6g-7hqx-qxhp) dependency_analyzer · 95%
medium
Vulnerable dependency: go.mongodb.org/mongo-driver@1.17.6 (GO-2026-5327) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-45gg-vh54-h5m9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-5cgq-3rg8-m6cv) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-78mq-xcr3-xm33) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-89gr-r52h-f8rx) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-9m57-25v3-79x9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-f5wc-c3c7-36mc) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-jppx-rxg9-jmrx) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-q4h4-gmj2-qvw2) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-qpw4-5x99-6vjp) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-rm3j-f69w-wqmq) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-vgwf-h737-ff37) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-w879-237q-wc7r) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-x527-x647-q7gg) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5005) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5006) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5013) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5014) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5015) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5016) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5017) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5018) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5019) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5020) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5021) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5023) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5033) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5932) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-6303) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-6354) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-6355) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GHSA-5cv4-jp36-h3mw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-4918) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5025) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5026) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5027) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5028) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5029) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5030) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5942) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.34.0 (GO-2026-5970) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/klauspost/compress@1.16.7 (GO-2026-5841) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/yuin/goldmark@1.7.16 (GO-2026-5320) dependency_analyzer · 95%
high
Long hex escape sequence in jonradoff-lightcms-c1165be/internal/services/asset_test.go:507 entropy_analyzer · 85%
info
Tool: start_link_check manifest_parser · 85%
info
Tool: get_link_check_results manifest_parser · 85%
info
Tool: get_theme manifest_parser · 85%
info
Tool: update_theme manifest_parser · 85%
info
Tool: get_theme_versions manifest_parser · 85%
info
Tool: get_theme_version manifest_parser · 85%
info
Tool: revert_theme_to_version manifest_parser · 85%
info
Tool: pin_theme_version manifest_parser · 85%
info
Tool: unpin_theme_version manifest_parser · 85%
info
Tool: get_site_config manifest_parser · 85%
info
Tool: update_site_config manifest_parser · 85%
info
Tool: list_redirects manifest_parser · 85%
info
Tool: create_redirect manifest_parser · 85%
info
Tool: update_redirect manifest_parser · 85%
info
Tool: delete_redirect manifest_parser · 85%
info
Tool: list_folders manifest_parser · 85%
info
Tool: create_folder manifest_parser · 85%
info
Tool: get_folder manifest_parser · 85%
info
Tool: delete_folder manifest_parser · 85%
info
Tool: list_collections manifest_parser · 85%
info
Tool: create_collection manifest_parser · 85%
info
Tool: get_collection manifest_parser · 85%
info
Tool: update_collection manifest_parser · 85%
info
Tool: delete_collection manifest_parser · 85%
info
Tool: regenerate_all_content manifest_parser · 85%
info
Tool: list_assets manifest_parser · 85%
info
Tool: list_asset_folders manifest_parser · 85%
info
Tool: get_asset manifest_parser · 85%
info
Tool: upload_asset manifest_parser · 85%
info
Tool: upload_asset_from_url manifest_parser · 85%
info
Tool: delete_asset manifest_parser · 85%
info
Tool: list_import_sources manifest_parser · 85%
info
Tool: create_import_source manifest_parser · 85%
info
Tool: update_import_source manifest_parser · 85%
info
Tool: delete_import_source manifest_parser · 85%
info
Tool: trigger_import_source manifest_parser · 85%
info
Tool: import_markdown manifest_parser · 85%
info
Tool: import_csv manifest_parser · 85%
info
Tool: list_import_jobs manifest_parser · 85%
info
Tool: get_import_job manifest_parser · 85%
info
Tool: cancel_import_job manifest_parser · 85%
info
Tool: list_comments manifest_parser · 85%
info
Tool: create_comment manifest_parser · 85%
info
Tool: delete_comment manifest_parser · 85%
info
Tool: start_agent_sandbox manifest_parser · 85%
info
Tool: get_agent_sandbox manifest_parser · 85%
info
Tool: end_agent_sandbox manifest_parser · 85%
info
Tool: get_fork_diff manifest_parser · 85%
info
Tool: get_agent_session_changes manifest_parser · 85%
info
Tool: rollback_agent_session manifest_parser · 85%
info
Tool: get_maintenance_report manifest_parser · 85%
info
Tool: run_maintenance_scan manifest_parser · 85%
info
Tool: get_site_info manifest_parser · 85%
info
Tool: list_pages manifest_parser · 85%
info
Tool: search_site manifest_parser · 85%
info
Tool: get_page manifest_parser · 85%
info
Tool: list_approval_workflows manifest_parser · 85%
info
Tool: get_approval_workflow manifest_parser · 85%
info
Tool: create_approval_workflow manifest_parser · 85%
info
Tool: update_approval_workflow manifest_parser · 85%
info
Tool: delete_approval_workflow manifest_parser · 85%
info
Tool: list_approval_requests manifest_parser · 85%
info
Tool: get_approval_request manifest_parser · 85%
info
Tool: submit_for_approval manifest_parser · 85%
info
Tool: approve_request manifest_parser · 85%
info
Tool: reject_request manifest_parser · 85%
info
Tool: cancel_approval_request manifest_parser · 85%
info
Tool: list_templates manifest_parser · 85%
info
Tool: get_template manifest_parser · 85%
info
Tool: create_template manifest_parser · 85%
info
Tool: update_template manifest_parser · 85%
info
Tool: delete_template manifest_parser · 85%
info
Tool: list_snippets manifest_parser · 85%
info
Tool: get_snippet manifest_parser · 85%
info
Tool: create_snippet manifest_parser · 85%
info
Tool: update_snippet manifest_parser · 85%
info
Tool: delete_snippet manifest_parser · 85%
info
Tool: search_content manifest_parser · 85%
info
Tool: search_replace_preview manifest_parser · 85%
info
Tool: search_replace_execute manifest_parser · 85%
info
Tool: end_user_search manifest_parser · 85%
info
Tool: reindex_embeddings manifest_parser · 85%
info
Tool: list_forks manifest_parser · 85%
info
Tool: create_fork manifest_parser · 85%
info
Tool: get_fork manifest_parser · 85%
info
Tool: fork_page manifest_parser · 85%
info
Tool: remove_fork_page manifest_parser · 85%
info
Tool: merge_fork manifest_parser · 85%
info
Tool: archive_fork manifest_parser · 85%
info
Tool: delete_fork manifest_parser · 85%
info
Tool: schedule_content_publish manifest_parser · 85%
info
Tool: cancel_scheduled_publish manifest_parser · 85%
info
Tool: list_scheduled_content manifest_parser · 85%
info
Tool: list_content manifest_parser · 85%
info
Tool: get_content manifest_parser · 85%
info
Tool: create_content manifest_parser · 85%
info
Tool: update_content manifest_parser · 85%
info
Tool: publish_content manifest_parser · 85%
info
Tool: unpublish_content manifest_parser · 85%
info
Tool: delete_content manifest_parser · 85%
info
Tool: restore_content manifest_parser · 85%
info
Tool: get_content_versions manifest_parser · 85%
info
Tool: get_content_version manifest_parser · 85%
info
Tool: revert_to_version manifest_parser · 85%
info
Tool: publish_multiple manifest_parser · 85%
info
Tool: preview_content manifest_parser · 85%
info
Tool: update_content_by_path manifest_parser · 85%
info
Tool: scoped_search_replace_preview manifest_parser · 85%
info
Tool: get_backlinks manifest_parser · 85%
info
Tool: scoped_search_replace_execute manifest_parser · 85%
info
Tool: bulk_create_content manifest_parser · 85%
info
Tool: bulk_update_content manifest_parser · 85%
info
Tool: bulk_field_operation manifest_parser · 85%
info
Tool: export_content manifest_parser · 85%
info
Tool: list_audit_logs manifest_parser · 85%
info
Tool: get_content_lock manifest_parser · 85%
info
Tool: acquire_content_lock manifest_parser · 85%
info
Tool: release_content_lock manifest_parser · 85%
info
Tool: force_unlock_content manifest_parser · 85%
info
Tool: list_webhooks manifest_parser · 85%
info
Tool: create_webhook manifest_parser · 85%
info
Tool: update_webhook manifest_parser · 85%
info
Tool: delete_webhook manifest_parser · 85%
info
Tool: regenerate_webhook_secret manifest_parser · 85%
info
Tool: list_webhook_deliveries manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (18) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
critical
Tool poisoning in 'search_replace_preview': Directive language: 'always' poisoning · 85%
critical
Tool poisoning in 'update_content': Cross-tool redirect: 'instead of X, use' poisoning · 85%
critical
Tool poisoning in 'scoped_search_replace_preview': Directive language: 'always' poisoning · 85%
critical
Tool poisoning in 'scoped_search_replace_execute': Directive language: 'always' poisoning · 85%
info
SBOM generated: 24 components sbom_generator · 100%
high
Hardcoded Password found in jonradoff-lightcms-c1165be/internal/auth/auth.go secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%